EUVD-2004-0392

Malware in sbrugna...

SUSE CVE-2007-1841

The isakmpinforecv function in src/racoon/isakmpinf.c in racoon in Ipsec-tools before 0.6.7 allows remote attackers to cause a denial of service tunnel crash via crafted 1 DELETE ISAKMPNPTYPED and 2 NOTIFY ISAKMPNPTYPEN messages...

Ubuntu Update for ipsec-tools vulnerability USN-450-1

Ubuntu Update for Linux kernel vulnerabilities USN-450-1 OpenVAS Vulnerability Test $Id: gbubuntuUSN4501.nasl 7969 2017-12-01 09:23:16Z santu $ Ubuntu Update for ipsec-tools vulnerability USN-450-1 Authors: System Generated Check Copyright: Copyright c 2009 Greenbone Networks GmbH,...

Mandrake Linux Security Advisory : ipsec-tools (MDKSA-2004:027)

A very serious security flaw was discovered by Ralf Spenneberg in racoon, the IKE daemon of the KAME-tools. Racoon does not very the RSA signature during phase one of a connection using either main or aggressive mode. Only the certificate of the client is verified, the certificate is not used to...

RHEL 3 : ipsec-tools (RHSA-2004:308)

An updated ipsec-tools package that fixes verification of X.509 certificates in racoon is now available. IPSEC uses strong cryptography to provide both authentication and encryption services. When configured to use X.509 certificates to authenticate remote hosts, ipsec-tools versions 0.3.3 and...

CVE-2004-0392

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...

CVE-2004-0403

Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...

CVE-2004-0392

racoon before 20040407b allows remote attackers to cause a denial of service infinite loop and dropped connections via an IKE message with a malformed Generic Payload Header containing invalid 1 "Security Association Next Payload" and 2 "RESERVED" fields...

CVE-2004-0403

Racoon before 20040408a allows remote attackers to cause a denial of service memory consumption via an ISAKMP packet with a large length field...

CVE-2004-0403

Removed by vendor...

racoon remote denial of service vulnerability (IKE Generic Payload Header)

When racoon receives an IKE message with an incorrectly constructed Generic Payload Header, it may behave erratically, going into a tight loop and dropping connections...